
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C6BC5A25EE411EF85CBB336C4F9AE02.roa
File: 5C6BC5A25EE411EF85CBB336C4F9AE02.roa (raw, json)
Hash identifier: 0QoYNddfclGPLGbG4/EPvTxNZzoOcj3DUM6x8Ie3+Sg=
Subject key identifier: 56:EA:29:06:95:00:DC:D2:E7:F5:10:71:0D:EC:5A:48:93:C1:97:4A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C6BC5A25EE411EF85CBB336C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:02:41 +0000
ROA not before: Mon 06 Jul 2026 17:02:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138258
IP address blocks: 103.122.232.0/22 maxlen: 24
2400:bbe0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61903 (0xf1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:02:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdfb1-1057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:26:b6:c9:34:79:00:93:10:cb:9c:de:9c:
d2:55:13:ce:70:08:63:16:35:20:ad:06:89:6e:10:
57:9e:c0:6b:cd:bf:c3:25:5e:31:c3:52:7f:0f:e9:
8f:97:94:cc:e9:11:20:25:5f:9d:8b:c0:d5:d9:9b:
62:35:de:15:5f:3c:16:9a:85:c6:f0:8e:73:68:f1:
e8:8e:34:48:00:20:26:66:dc:b8:37:e9:eb:47:29:
c3:64:d4:ad:73:31:72:98:83:bf:be:30:98:ef:6b:
ef:be:8c:55:2b:46:3f:1f:09:a5:2a:14:1c:21:9a:
88:1b:02:55:70:9a:34:1e:9e:90:f9:98:1e:13:c8:
d7:6e:9c:9c:8c:c8:6c:e1:6d:f0:c7:8a:83:5b:3a:
f8:21:00:ed:7f:a7:b0:b1:fa:1e:07:92:d5:7b:ab:
d0:bb:2e:19:06:2d:3e:05:46:b8:88:34:b8:49:f7:
ba:48:3a:2a:09:79:33:6e:f9:81:7b:89:8d:f2:26:
49:29:c5:ed:e2:d6:c9:df:d6:c1:c6:84:9b:78:af:
36:b2:0a:f9:79:09:e8:9b:de:ac:fd:40:76:1c:0d:
be:bf:eb:3c:92:ed:2c:f4:e4:9d:17:de:ad:a6:c4:
57:2d:21:80:4a:ed:26:15:a6:64:d1:7f:26:f0:c4:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:29:06:95:00:DC:D2:E7:F5:10:71:0D:EC:5A:48:93:C1:97:4A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C6BC5A25EE411EF85CBB336C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.232.0/22
IPv6:
2400:bbe0::/32
Signature Algorithm: sha256WithRSAEncryption
93:4e:56:46:59:b8:7f:94:ad:04:54:f1:23:8b:68:95:40:09:
b0:a1:6a:cf:9b:83:72:39:4e:c0:73:02:a6:3f:9d:a0:35:87:
9d:18:7c:c5:04:17:58:d9:b0:0f:18:87:52:dd:06:fe:1b:c9:
43:1e:6c:a7:fb:97:dc:04:46:d7:bf:0b:ee:7b:ae:c0:a3:3b:
73:ef:8f:25:71:15:8e:1e:6d:02:ea:ef:8a:61:a0:65:6a:20:
79:2d:37:f3:79:e0:96:0f:ce:50:7f:77:73:d9:a8:60:29:26:
ff:45:92:d2:a3:ba:99:9a:b6:02:69:71:04:fb:5b:b5:28:8c:
aa:83:29:f6:91:97:15:bc:55:e8:a5:e5:79:ae:31:37:e9:24:
3c:9a:55:70:4a:45:96:24:51:a7:91:2c:a7:ae:73:3d:3e:ac:
fc:9b:80:9b:de:cc:b1:cb:b5:eb:36:8b:2e:4d:37:9c:50:e5:
73:bb:da:18:8e:8f:44:fd:71:72:88:8f:d3:8c:e0:3d:f1:c2:
74:69:f7:00:78:fb:89:83:02:ce:64:74:f5:2d:64:6a:f0:b4:
6f:64:a4:86:be:2b:d6:e8:0f:07:17:32:75:45:e5:e3:cc:9d:
bf:d2:52:08:3c:39:1d:5d:54:10:8f:26:e5:95:44:85:e8:f9:
45:dc:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:33 2026 by rpki-client